Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
File: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft (raw, json)
Hash identifier: elTS0PUtbjGiIEQQRxKH/vMFjqkw22DLQeaLqZ+/HUY=
Subject key identifier: 5C:03:CA:6B:75:01:9B:03:33:A8:88:F9:7F:8C:03:CE:96:C6:3E:AD
Authority key identifier: CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
Certificate issuer: /CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Certificate serial: 12115BA59F15862F084890677AB26417FBB92C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
Manifest number: 2D
Signing time: Mon 18 Aug 2025 20:58:36 +0000
Manifest this update: Mon 18 Aug 2025 20:53:36 +0000
Manifest next update: Wed 20 Aug 2025 00:27:36 +0000
Files and hashes: 1: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl (hash: 0SXHem1P29wTf0Lv1b11kXYPn6pMkS279bDB9HIe6Go=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:11:5b:a5:9f:15:86:2f:08:48:90:67:7a:b2:64:17:fb:b9:2c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Validity
Not Before: Aug 18 20:53:36 2025 GMT
Not After : Aug 20 00:27:36 2025 GMT
Subject: CN=5C03CA6B75019B0333A888F97F8C03CE96C63EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:5f:76:be:eb:35:6c:eb:30:7e:90:b9:1d:
c5:48:bf:36:01:da:a6:25:63:50:26:03:ec:80:af:
e3:4f:a8:48:39:92:97:76:a6:91:a0:af:af:cc:20:
ae:42:1e:ed:e1:4c:8d:94:e7:47:bf:73:d9:0c:6a:
09:c9:c5:4d:b7:b7:86:d0:23:48:4b:6d:73:51:70:
f9:00:53:2f:b3:12:67:f3:b3:2e:13:2b:96:a0:12:
31:bc:f6:74:d6:2a:57:c9:e6:8e:fb:09:41:af:24:
dc:54:1e:57:35:b6:c4:5d:cd:4a:e9:fb:a7:03:91:
8d:9b:b6:b5:f2:26:bd:69:be:49:40:4e:30:8b:f7:
46:07:98:e3:27:73:ac:b0:5a:cb:e0:35:d2:f9:5b:
eb:aa:4b:9d:b3:e8:ab:50:4b:05:36:6c:c1:49:e1:
5d:96:95:dc:37:22:db:cd:9b:88:05:b6:8f:d3:60:
55:e3:0a:4e:b1:5a:b6:09:ef:de:6f:9e:f0:93:10:
97:d9:07:5a:1c:31:f6:88:21:ea:3f:52:e6:e7:c5:
25:2f:f5:a1:08:06:f4:b6:3b:71:c1:c3:04:56:02:
73:da:7e:a6:90:b9:36:0c:29:3c:40:d5:de:9e:d0:
36:83:05:c6:1d:16:fb:25:d3:ea:16:28:43:df:ef:
63:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:CA:6B:75:01:9B:03:33:A8:88:F9:7F:8C:03:CE:96:C6:3E:AD
X509v3 Authority Key Identifier:
keyid:CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cf:73:aa:d3:eb:9f:43:fa:fb:c3:15:61:c7:d8:a6:f4:ab:
2a:7a:a4:fb:09:84:24:39:02:29:46:23:a0:82:27:09:09:18:
4a:0a:38:95:ea:56:5d:f6:db:16:ec:19:3e:4c:03:54:f2:ac:
6f:24:0a:96:de:bc:0e:90:a5:ef:b0:77:b7:e9:a3:51:3e:f5:
2c:ed:29:6a:c4:2b:46:a0:53:d2:44:de:f5:61:d5:39:45:48:
f7:30:b6:e3:26:61:30:11:d7:a1:b4:14:96:42:82:39:04:71:
05:01:f6:19:00:df:41:4f:5d:91:2b:6c:b6:ff:27:ad:13:ce:
74:ff:06:5f:ad:c0:22:2a:5e:8f:16:9d:60:29:45:cc:18:25:
93:7b:84:13:5f:dd:a8:3a:52:21:83:e6:1d:62:35:39:a9:bd:
c3:14:5c:b6:66:7e:cd:02:ec:20:ef:81:c1:79:e3:f5:51:30:
46:2c:7a:1c:47:ef:b0:c1:11:fd:bb:b3:12:2b:6b:ce:fb:3f:
0a:38:3f:f3:f2:01:6f:df:3a:ea:9d:30:a6:3c:8a:46:c5:78:
7f:aa:e6:7e:7a:14:5c:be:64:ef:8d:61:ed:99:51:a8:91:da:
1f:07:26:b5:fe:00:20:2e:48:12:6a:22:1e:a1:3e:4e:88:b9:
1a:78:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:21:01 2025 by rpki-client